Vivotek FD8136
Approved changes feed: RSS · Atom
cpe:2.3:h:vivotek:fd8136:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Vivotek (f3d58ac8-0e4b-5832-9edd-ecd09cb2aa5c) |
|---|---|
| Product | Fd8136 (66320bf6-63c6-5193-b810-6900536a51cb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35718 |
not_vulnerable | 2026-06-08 07:59:14.243282 |
Details available
A path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136-VVTK firmware 0300a allows authenticated attackers to read any file on the device via sending a crafted request.
Published: 2026-06-02T00:00:00.000Z
Updated: 2026-07-05T01:36:28.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14496 |
not_vulnerable | 2026-06-08 05:10:52.990149 |
Details available
Vivotek FD8136 devices allow remote memory corruption and remote code execution because of a stack-based buffer overflow, related to sprintf, vlocal_buff_4326, and set_getparam.cgi. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
Published: 2019-07-10T13:25:23.000Z
Updated: 2024-08-05T09:29:51.660Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14495 |
not_vulnerable | 2026-06-08 05:10:52.989777 |
Details available
Vivotek FD8136 devices allow Remote Command Injection, aka "another command injection vulnerability in our target device," a different issue than CVE-2018-14494. NOTE: The vendor has disputed this as a vulnerability and states that the issue does not cause a web server crash or have any other affect on it's performance
Published: 2019-07-10T13:20:18.000Z
Updated: 2024-08-05T09:29:51.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14494 |
not_vulnerable | 2026-06-08 05:10:52.989097 |
Details available
Vivotek FD8136 devices allow Remote Command Injection, related to BusyBox and wget. NOTE: the vendor sent a clarification on 2019-09-17 explaining that, although this CVE was first populated in July 2019, it is a historical vulnerability that does not apply to any current or recent Vivotek hardware or firmware
Published: 2019-07-10T12:56:42.000Z
Updated: 2024-08-05T09:29:51.666Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.